Helm and RBAC question

[openfaas]

Helm and RBAC question

[inge4pres]

Great news! The chart works perfectly in 1.7.6 with RBAC too: helm install --name openfaas --set async=true ./openfaas works perfectly with k8s 1.7.6 but that version is still not in the stable channel for minikube hence requires additional parameters to install.

So for minikube users:

• update to latest minikube (v0.22.3)
• bootstrap cluster with minikube start --kubernetes-version v1.7.6 --bootstrapper kubeadm [--vm-driver ...] as mentioned in minikube/issues/2003

As I was planning a PR to refine HELM.md, I will put the steps in there if you agree.

[alexellis]

Please could you run with this?

[inge4pres]

Trying to debug the reason of the failure in openfaas/templates/rbac.yaml

[alexellis]

Have you run in the additional role needed for RBAC in the helm guide?

https://github.com/openfaas/faas-netes/blob/master/HELM.md

[alexellis]

We do have a rbac=true/false switch also. RBAC is on by default.

cc/ @weikinhuang

[weikinhuang]

Right now it's trying to create a cluster role. We should change it to use a regular role when functions are not being deployed to a separate namespace.

Or in the meantime give your user cluster-admin privileges.

[gardlt]

Was having similar problems also with this you can do helm install local/openfaas --set rbac=false and it should work fine, i think there is a permission issue when deploying additional rbac rule with minikube might need to enable rbac changes when starting minikube.

[weikinhuang]

I'll try to get around to making the needed fix next week

[inge4pres]

@alexellis yes I assigned RBAC role to Tiller but it looks like the issue is not there.
However I tried with a GKE cluster just installed and everything works ok.
At this point it might just be a minikube issue.

Some details on my installation:

minikube version
minikube version: v0.22.3

kubectl version
Client Version: version.Info{Major:"1", Minor:"8", GitVersion:"v1.8.0", GitCommit:"0b9efaeb34a2fc51ff8e4d34ad9bc6375459c4a4", GitTreeState:"clean", BuildDate:"2017-09-29T05:56:06Z", GoVersion:"go1.9", Compiler:"gc", Platform:"darwin/amd64"}
Server Version: version.Info{Major:"1", Minor:"7", GitVersion:"v1.7.5", GitCommit:"17d7182a7ccbb167074be7a87f0a68bd00d58d97", GitTreeState:"clean", BuildDate:"2017-10-06T20:53:14Z", GoVersion:"go1.8.3", Compiler:"gc", Platform:"linux/amd64"}

[alexellis]

Elliott @elliotbeach and myself have been deploying with minikube via the YAML files. I'll try with rbac=false on my Mac with helm this week and see how that goes.

[alexellis]

@inge4pres @weikinhuang where did we get on this?

[weikinhuang]

Looks like a minikube issue from @inge4pres's comments. However we can probably switch to using a Role instead of a ClusterRole when not deploying functions to a different namespace.